This notice explains which personal data we process when you use the ancamihaela.ro website or contact us, why we process it and what rights you have under Regulation (EU) 2016/679 (“GDPR”) and the applicable national legislation.

This notice applies to the ancamihaela.ro website and to communication by email and phone, and is effective from 10 October 2026. At the end you will find a glossary of the main terms used.

Who processes your data and how to contact us

The controller of your data is:

IT SUPPORT WEB DEVELOPMENT S.R.L.
Registered office: Intr. Zamora no. 5, room 1, Domnești village, Ilfov County, postal code 077090, Romania
Tax ID (CUI): 39800440 · Trade Register no.: J2018004095238 · EUID: ROONRC.J2018004095238
Email: [email protected] · Phone: +40 726 578 423

For any question about your data or to exercise your rights, you can write to us at the email address above. This notice is for information purposes and does not limit your legal rights.

What data we process

We only process the data we need, obtained directly from you:

  • The contact form: name, email address, phone number and the message you send us.
  • Direct communication: data from your emails and calls, such as your name, email address, phone number and the content of the conversation.
  • Working on projects: contact details of the people we work with on behalf of the client company and the data needed for quotes, contracts and invoicing.
  • Technical data: IP address and browser information, kept temporarily in the server logs for the website to work securely.
  • Contact form protection: the contact page uses Google reCAPTCHA, which analyses interaction with the page (such as IP address, browser information and cursor movements) to tell people apart from automated programs sending spam.
  • Traffic statistics: only if you accept statistics cookies, information about the pages visited, collected in aggregate through Google Analytics. Details in the Cookie policy.

We do not process special categories of data (for example, health data) and we do not ask for your personal identification number. We do not make decisions based solely on automated processing and we do not create profiles.

Legal bases for processing

  • Entering into or performing a contract (Art. 6(1)(b) GDPR): when you ask for a quote, we discuss a project or we work together.
  • Legal obligations (Art. 6(1)(c) GDPR): for example, accounting and tax obligations related to invoicing.
  • Legitimate interest (Art. 6(1)(f) GDPR): replying to the messages we receive, keeping the website and the contact form secure against spam (Google reCAPTCHA) and being able to defend our rights.
  • Your consent (Art. 6(1)(a) GDPR): for statistics cookies. You can withdraw your consent at any time with the “Cookies” button in the corner of the screen.

Purposes of processing

  • replying to your questions and requests;
  • preparing quotes and providing the agreed design services;
  • invoicing and client relations;
  • meeting our legal obligations, including archiving;
  • running, securing and improving the website;
  • aggregate statistics about visits to the website, only with your consent.

We do not send newsletters or marketing messages without your consent and we do not sell your data.

Who we share data with

As a general rule, we do not share your data with anyone else. We may share it only in the following situations:

  • with providers who help us operate, such as website hosting and email services, acting as processors under a contract and only on our instructions;
  • with Google Ireland Limited, for reCAPTCHA on the contact page and for Google Analytics, only if you have accepted statistics cookies; Google's Privacy Policy and Terms of Service also apply to reCAPTCHA; the data may be transferred outside the European Economic Area with the safeguards provided by the GDPR, such as the European Commission's standard contractual clauses;
  • with our accountant and other professional advisers, who are bound by confidentiality;
  • with public authorities, courts or bailiffs, when required by law or to establish, exercise or defend a legal claim;
  • with other parties, only at your request or with your consent.

How long we keep data

  • Messages received through the form or by email, for as long as needed to reply and no longer than 2 years after the last contact, unless we start working together.
  • Contract and invoicing data, for the duration of the collaboration and then for the period required by accounting legislation.
  • Google Analytics statistics, for no longer than 14 months.
  • Cookies, for the period described in the Cookie policy.

How we protect data

We use encrypted connections (HTTPS), restricted and password-protected access to the website administration and to the messages received, security updates and backups. Only the people who need the data for the purposes above have access to it, and they are bound by confidentiality.

Your rights

  • Right of access: you can find out what data we hold about you and receive a copy of it.
  • Right to rectification: you can ask us to correct inaccurate data or complete incomplete data.
  • Right to erasure (“right to be forgotten”): you can ask us to delete your data, except where the law requires us to keep it or we need it to defend a legal claim.
  • Right to restriction of processing: for example, while we verify the accuracy of data you have contested.
  • Right to object: you can object to processing based on our legitimate interest, on grounds relating to your particular situation.
  • Right to data portability: you can receive the data you provided to us in a structured, commonly used and machine-readable format, or ask us to transmit it to another organisation where technically feasible.
  • Right to withdraw consent at any time, as easily as you gave it, without affecting processing carried out before the withdrawal.
  • Right to lodge a complaint with the supervisory authority.

To exercise your rights, write to us at [email protected]. We reply within one month, which may be extended by two further months for complex requests; in that case we will let you know and explain why. If we cannot identify you from your request, we may ask you for additional information.

If you have a concern, please contact us first so we can resolve it. You can also lodge a complaint at any time with:

National Supervisory Authority for Personal Data Processing (ANSPDCP)
B-dul G-ral. Gheorghe Magheru no. 28-30, Sector 1, postal code 010336, Bucharest, Romania
Phone: +40 318 059 211 / +40 318 059 212 · Email: [email protected] · www.dataprotection.ro

If you do not provide your data

You are not required to provide personal data. Without your contact details, however, we cannot reply to your messages, prepare a quote or provide the services you request.

Minors

The website is aimed at companies and does not knowingly collect data about people under 16.

Changes to this notice

We may update this notice when the way we process data or the legislation changes. The version in force is always the one published on this page, with the date at its beginning.

Glossary

Personal data
Any information relating to an identified or identifiable natural person, such as a name, email address, phone number or an online identifier.
Processing
Any operation performed on data: collection, recording, storage, consultation, use, disclosure, erasure and the like.
Controller
The person who determines the purposes and means of processing. For this website, the controller is IT SUPPORT WEB DEVELOPMENT S.R.L.
Processor
A person who processes data on behalf of the controller and on its instructions, for example the hosting provider.
Data subject
The natural person the data relates to. In your relationship with us, you are the data subject.
Supervisory authority
The independent public authority that monitors compliance with data protection legislation. In Romania, this is ANSPDCP.